WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
limit-login-attempts-reloaded
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.17.4 - Login Rate Limiting Bypass
Slug
limit-login-attempts-reloaded
Published
2023-11-06
Title
Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update
Slug
limit-login-attempts-reloaded
Published
2023-12-20
Title
Limit Login Attempts Reloaded < 2.25.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
limit-login-attempts-reloaded
Published
2026-08-17
Title
Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email
Slug
limit-max-ips-per-user
Published
2025-04-01
Title
Limit Max IPs Per User <= 1.5 - Reflected Cross-Site Scripting
Slug
linear
Published
2024-11-13
Title
Linear < 2.8.1 - Contributor+ Stored XSS
Slug
linear
Published
2025-01-08
Title
Linear < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
linear
Published
2025-01-24
Title
Linear < 2.8.2 - Cross-Site Request Forgery to Cache Reset
Slug
linet-erp-woocommerce-integration
Published
2025-01-24
Title
Linet ERP-Woocommerce Integration < 3.5.8 - Cross-Site Request Forgery
Slug
linet-erp-woocommerce-integration
Published
2025-04-10
Title
Linet ERP-Woocommerce Integration < 3.6.0 - Authenticated (Admin+) Arbitrary File Read & Deletion
Slug
lingotek-translation
Published
2025-04-10
Title
Ray Enterprise Translation < 1.7.1 - Unauthenticated Local File Inclusion
Slug
lingotek-translation
Published
2025-09-05
Title
Ray Enterprise Translation <= 1.7.1 - Missing Authorization
Slug
lingotek-translation
Published
2025-08-30
Title
Ray Enterprise Translation < 1.7.2 - Unauthenticated Local File Inclusion
Slug
lingotek-translation
Published
2026-08-08
Title
Ray Enterprise Translation < 1.7.5 - Subscriber+ Arbitrary API Token Update
Slug
lingotek-translation
Published
2026-08-08
Title
Ray Enterprise Translation < 1.7.5 - Subscriber+ Language Addition and Deletion
Slug
link-checker
Published
2019-03-22
Title
Link Checker < 1.17.0 - XSS
Slug
link-factory
Published
2026-08-11
Title
Link Factory - Backdoor
Slug
link-hopper
Published
2026-02-13
Title
Link Hopper < 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'hop_name' Parameter
Slug
link-juice-keeper
Published
2023-02-10
Title
Link Juice Keeper < 2.0.3 - Admin+ Stored XSS
Slug
link-library
Published
2014-08-01
Title
Link Library 5.1.6 - link-library-ajax.php Multiple Parameter SQL Injection
Slug
link-library
Published
2014-08-01
Title
Link Library 5.0.8 - wp-content/plugins/link-library/tracker.php id Parameter XSS
Slug
link-library
Published
2014-08-01
Title
Link Library 5.0.8 - wp-content/plugins/link-library/tracker.php id Parameter SQL Injection
Slug
link-library
Published
2014-08-01
Title
Link Library < 5.7.9.7 - SQL Injection
Slug
link-library
Published
2016-08-15
Title
Link Library <= 5.9.12.29 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
link-library
Published
2017-08-14
Title
Link-Library <= 5.9.13.26 – Authenticated SQL Injection